Beschreibung

In this role, you will lead the Security Operations Center, managing daily operations and incident responses while mentoring a team of analysts. You will collaborate with various departments to enhance security measures and ensure compliance, all while driving continuous improvement in detection and response capabilities.

Anforderungen

• •Extensive experience in cybersecurity operations in a leadership or SOC management role
• •Deep understanding of SIEM, SOAR, incident response methodologies, threat intelligence, and cloud security (AWS preferred)
• •Proven track record of building or scaling a SOC, including process development and team management
• •Relevant certifications such as CISSP, CISM, or GIAC (GSOC, GCIH) are a plus
• •Exceptional communication skills, with the ability to translate complex technical issues for both technical and non-technical audiences
• •Strong analytical and problem-solving abilities, coupled with a proactive, results-oriented mindset
• •Experience aligning security operations with compliance frameworks (ISO 27001, DORA, PCI-DSS, etc.)

Aufgaben

• •Manage day-to-day SOC operations
• •Triage alerts and respond to incidents
• •Conduct threat hunting activities
• •Develop and maintain SOC playbooks and runbooks
• •Lead major security incidents and coordinate teams
• •Communicate status updates to stakeholders
• •Define and track SOC metrics for improvement
• •Oversee tuning and optimization of SIEM/SOAR platforms
• •Conduct regular risk assessments and gap analyses
• •Mentor and develop SOC analysts and engineers
• •Ensure SOC processes meet regulatory requirements
• •Evaluate and implement new security tools and technologies

Tools & Technologien

Benefits